Nitro server integration for Nuxt
88%
Total Score
healthy
Frequent stable releases, strong organization backing, and active maintenance support this release.
The release declares 29 runtime dependencies, a meaningful integration surface but not by itself evidence of poor health.
The repository name does not match the package and its README does not mention @nuxt/nitro-server, creating a package-to-source transparency concern; the broader repository tree nevertheless looks consistent with a monorepo.
All 25 workflows were analyzed with no audit findings; 24 use read-only permissions, while four of 79 action references are unpinned and one workflow has top-level write permissions, leaving a minor hygiene concern.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10949 @nuxt/nitro-server is vulnerable to Authentication Bypass in versions 3.20.0 - 3.21.5 and 4.2.0 - 4.4.5. | 3.20.0 - 3.21.54.2.0 - 4.4.5 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
h3 Version ^1.15.11 | — | — |
ufo Version ^1.6.4 | — | — |
vue Version ^3.5.44 | — | — |
defu Version ^6.1.7 | — | — |
errx Version ^0.2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.